CVE-2018-16276: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in yurex_read in drivers/usb/misc/yurex.c in the Linux kernel before 4.17.7. Local attackers could use user access read/writes with incorrect bounds checking in the yurex USB driver to crash the kernel or potentially escalate privileges.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 18.04 only
• Debian Debian Linux: version 8.0 only; version 9.0 only
• Linux Linux Kernel: from 2.6.37, before 3.16.58 (fixed in 3.16.58); from 3.17, before 3.18.116 (fixed in 3.18.116); from 3.19, before 4.4.141 (fixed in 4.4.141); from 4.5, before 4.9.113 (fixed in 4.9.113); from 4.10, before 4.14.56 (fixed in 4.14.56); from 4.15, before 4.17.7 (fixed in 4.17.7)

Published 2018-08-31. Last modified 2026-06-17.